Hello,

Your problem has nothing to deal with HAProxy.

I guess you use a custom font in one of your CSS, and the font path begins
with http://
When accessing the website over https, your browser refuse to load your
custom font (as it is not secure) and use a default one (which appears to
have a different size).

Just edit your CSS and it will fix your issue.

Olivier


2015-05-20 15:13 GMT+02:00 Sefer Simsek <sefersim...@yahoo.com>:

> Hi,
> Newly I installed haproxy.
>
> Version is:
> HA-Proxy version 1.5.12 2015/05/02
> Copyright 2000-2015 Willy Tarreau <w...@1wt.eu>
>
> I configured haproxy.cfg
>
> ############### Conf. Begin ###############
> ############### GLOBAL CONF ############
> global
>         log /dev/log    local0
>         log /dev/log    local1 notice
>         chroot /var/lib/haproxy
>         stats socket /run/haproxy/admin.sock mode 660 level admin
>         stats timeout 30s
>         maxconn 4096
>         user haproxy
>         group haproxy
>         daemon
>         tune.ssl.default-dh-param 2048
>
>         # Default SSL material locations
>         ca-base /etc/ssl/certs
>         crt-base /etc/ssl/private
>
>         # Default ciphers to use on SSL-enabled listening sockets.
>         # For more information, see ciphers(1SSL). This list is from:
>         #
> https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
>         ssl-default-bind-ciphers
> ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
>         ssl-default-bind-options no-sslv3
>
> ############### DEFAULT CONF ############
> defaults
>         log     global
>         mode    http
>         option forwardfor
>         option http-server-close
>         option  httplog
>         option  dontlognull
>         retries 3
>         option redispatch
>         timeout connect 5000
>         timeout client  50000
>         timeout server  50000
>         errorfile 400 /etc/haproxy/errors/400.http
>         errorfile 403 /etc/haproxy/errors/403.http
>         errorfile 408 /etc/haproxy/errors/408.http
>         errorfile 500 /etc/haproxy/errors/500.http
>         errorfile 502 /etc/haproxy/errors/502.http
>         errorfile 503 /etc/haproxy/errors/503.http
>         errorfile 504 /etc/haproxy/errors/504.http
>
> ############### www http to https redirect CONF ############
>
>     mode  http
>     stats enable
>     stats hide-version
>     stats uri /stats
>     stats realm Haproxy\ Statistics
>     stats auth user:password
> frontend www-http
>    bind front_ip:80
>    reqadd X-Forwarded-Proto:\ http
>    default_backend www-backend
>
> frontend www-https
>    bind front_ip:443 ssl crt /etc/ssl/private/certificate.pem
>    reqadd X-Forwarded-Proto:\ https
>    default_backend www-backend
>
> backend www-backend
>    balance roundrobin
>    redirect scheme https if !{ ssl_fc }
>    server wwwsrv1 back_ip:80 check cookie wwwsrv1
>    server wwwsrv2 back_ip:80 check cookie wwwsrv2
> ######### Conf. End #################
>
> Now mysite is going to ssl and working well.
>
> So,
> My problem is.
> When I'm using over https protocol my site's font changing. It has smaller
> than the orijinal.
> For exm: orijinal Times Roman 14 pt, when I'm going to over ssl font is
> arial 12 pt. anyway.
> When I'm removing https redirect option, and going to over http protocol
> than font is very well.
>
> What is the trick there? Any idea?
> My backend servers running apache and wordpress last version.
>
> Thank you.
>
>

Reply via email to